Skip to content

topic (iac): [secure-hybrid-network] update OS and VM SKU to modern Gen2#267

Merged
ckittel merged 1 commit into
topic/421252_tighten-fw-rulesfrom
topic/421252_update-os-version
May 22, 2026
Merged

topic (iac): [secure-hybrid-network] update OS and VM SKU to modern Gen2#267
ckittel merged 1 commit into
topic/421252_tighten-fw-rulesfrom
topic/421252_update-os-version

Conversation

@ferantivero
Copy link
Copy Markdown
Contributor

Why

Windows Server 2016 reached end of mainstream support. Standard_A4_v2 is a legacy SKU with poor price-performance.

What

  • Update OS from 2016-Datacenter to 2025-datacenter-core-smalldisk-g2
  • Update VM SKU from Standard_A4_v2 to Standard_D2s_v3

Test

  • Bicep compiles without errors

- Replace Standard_A4_v2 (Gen1-only) with Standard_D2s_v3 (Gen2-capable)
- VMSS (web tier): 2025-datacenter-core-smalldisk-g2 (Server Core for IIS)
- Mock on-prem VM: 2025-datacenter-smalldisk-g2 (full desktop for Bastion RDP)
- Smaller disk, faster boot, reduced attack surface on web tier

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@ckittel ckittel merged commit a6a4e98 into topic/421252_tighten-fw-rules May 22, 2026
2 checks passed
@ckittel ckittel deleted the topic/421252_update-os-version branch May 22, 2026 21:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants